IAMTrail
UnofficialAWS silently updates Managed IAM policies all the time.
We catch every single change.
Full version history and diffs for 1559 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io
Total Policies
1,559
Active AWS Managed Policies
Brand New (v1)
20
New AWS services/features
Deprecated
75
Removed from AWS
Most Active
100
ReadOnlyAccess...
Brand New Policies (v1)
Spot upcoming AWS services early - 20 new policies detected
EC2ApplicationStatusChecksServiceRolePolicy
v1 / 4/27/2026
AmazonEBSCSIDriverEKSClusterScopedPolicy
v1 / 4/16/2026
AmazonEBSCSIDriverPolicyV2
v1 / 4/16/2026
AWSBedrockAgentCoreIdentityNetworkServiceRolePolicy
v1 / 4/15/2026
NAPSPropagatorIntegTestManagedPolicy07
v1 / 4/9/2026
AmazonSageMakerCapacityReservationServiceRolePolicy
v1 / 4/8/2026
Get notified when policies change
Daily or weekly email digests with inline diffs. Pick specific policies or track them all.
Endpoint Signals
46 regions, 310 services tracked from botocore
redshift-serverlessap-southeast-4ca-west-1awscloudhsmv2ap-southeast-6awsmgnap-east-2ap-southeast-6ca-west-1+1awsworkspacesap-southeast-5us-east-2awsPolicy Creation by Year
Number of AWS managed policies first tracked each year
Largest Policy
4169 actions
AWSSupportServiceRolePoli...
AWS Services Tracked
431
IAM service namespaces over time
IAM Actions (literals)
14,242
Distinct action strings in managed policies (no wildcards)
Year-over-Year Velocity
Total policy commits per year - new launches vs. updates
Excludes 4 bulk-reformat day(s) where detection logic changes caused false-positive diffs.
Policy Lifecycle
Current version distribution across all policies
39% of policies (613) are still at v1 - created once and never updated.
Monthly Seasonality
Policy change volume by calendar month across all years
re:Invent Pulse
Policy changes during the Nov 15 - Dec 15 window each year
Recently Updated
AWSMarketplaceSellerFullAccess
AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
AWSElasticBeanstalkMulticontainerDocker
AWSElasticBeanstalkWebTier
AWSElasticBeanstalkWorkerTier
AWSSecurityHubServiceRolePolicy
EC2ApplicationStatusChecksServiceRolePolicy
AmazonEKSLoadBalancingPolicy
AWSTransformCustomExecuteTransformations
AWSTransformCustomManageTransformations
Most Volatile (Trailing 12 Months)
Newest Policies
AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
AWSMarketplaceSellerFullAccess
AWSElasticBeanstalkWebTier
AWSElasticBeanstalkMulticontainerDocker
AWSElasticBeanstalkWorkerTier
AWSSecurityHubServiceRolePolicy
EC2ApplicationStatusChecksServiceRolePolicy
AmazonEKSLoadBalancingPolicy
AWSTransformCustomExecuteTransformations
AWSTransformCustomManageTransformations
Oldest Policies
AWSOpsWorksRegisterCLI
AmazonMachineLearningRoleforRedshiftDataSource
TagGovernancePolicy
AWSLambdaReplicatorInternal
AmazonEverestServicePolicy
AWSB9InternalServicePolicy
AWSBackupAdminPolicy
AWSBackupOperatorPolicy
AWSCloudTrailFullAccess
AWSDataPipelineRole